Packages

@prisma/adapter-mssql

7.10.1 · 15 Oct 2026Apache-2.0117k / weekRepositorynpmAtom feed

Upgrading @prisma/adapter-mssql From 6.19.3 to 7.10.1

16 releases in betweennotes for 2

7.0.0 has no release note on GitHub or in the repository's changelog, so its breaking changes are missing from the counts below.
  1. 6.19.3yours
  2. 7.0.0major
  3. 13 releases
  4. 7.10.0security
  5. 7.10.1target
  6. 8 pre
?
changes to make
0
advisories fixed
7+
new
10+
fixes

Counted from 2 of 16 release notes. Advisories are counted from the advisory database, in full.

Security

  • It also updates dependencies that had security advisories.

    7.10.1

  • @prisma/adapter-mariadb now depends on mariadb 3.5.4, which fixes several security advisories in 3.5.3.

    7.10.1

  • Dependencies with security advisories were updated: mysql2, fast-uri, deepmerge-ts, mariadb and source-map-js. (#30314, #30189, #30668)

    7.10.1

  • Binds explicitly to 127.0.0.1 instead of all network interfaces.

    7.10.0

  • Rejects browser requests from origins other than the active localhost or 127.0.0.1 Studio URL.

    7.10.0

  • No longer returns wildcard CORS headers.

    7.10.0

  • Applies the same protections across Node.js, Bun, and Deno.

    7.10.0

Release by release

  1. 7.10.1

    Security fix15 Oct 20262 fixes
    • security

      It also updates dependencies that had security advisories.

    • security

      @prisma/adapter-mariadb now depends on mariadb 3.5.4, which fixes several security advisories in 3.5.3.

    • security

      Dependencies with security advisories were updated: mysql2, fast-uri, deepmerge-ts, mariadb and source-map-js. (#30314, #30189, #30668)

    • fixed

      If the old transaction had committed, the new one failed with P2028;

    • fixed

      If the old transaction was still open, the new one silently ran as a savepoint inside another request's transaction.

  2. 7.10.0

    Security fix25 Aug 20267 new · 8 fixes
    • security

      Binds explicitly to 127.0.0.1 instead of all network interfaces.

    • security

      Rejects browser requests from origins other than the active localhost or 127.0.0.1 Studio URL.

    • security

      No longer returns wildcard CORS headers.

    • security

      Applies the same protections across Node.js, Bun, and Deno.

  3. 7.0.0 – 7.9.114 releases, no release note

28 other lines we could not sort, mostly version bumps

  • Parameter-chunked statements are now executed atomically in a transaction and rolled back if a later chunk fails. #29771

    7.10.0

  • Improved interactive transaction cleanup during $disconnect(), including transactions whose driver-level startup is still in progress. #28768

    7.10.0

  • Prevented transaction cleanup failures after a timeout or backend termination from becoming unhandled promise rejections. #29611

    7.10.0

  • Invalid Date values passed to $queryRaw or $executeRaw now throw PrismaClientValidationError instead of a generic error. #29718

    7.10.0

  • Deserialized Bytes values now own standalone ArrayBuffers rather than exposing unrelated contents from Node.js's shared Buffer pool. This applies to both regular and raw query results. #29701

    7.10.0

  • Result-extension compute callbacks now receive the current model name as a typed second argument:

    7.10.0

  • $on('query') callbacks run within the matching db_query span.

    7.10.0

  • Events from one operation share the same trace.

    7.10.0

  • Error events are recorded as span exceptions.

    7.10.0

  • Log events continue to be emitted when tracing is disabled or their reported span is unavailable.

    7.10.0

1 internal line (docs, tests, tooling) left out.